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Description 

[0001] This invention relates to a method for author- 
izing a credit/debil card holder to purchase goods or 
services. 

[0002] In recent years, telephone ordering of mer- 
chandise has become an increasingly common method 
of purchase. In a typical transaction, a caller calls a 
store, Indicates the merchandise that is to be bought, 
provides his/her address tor the delivery of the merchan- 
dise, end provides a credit/debit card (CDC) number. 
The vendor verifies that the CDC is valid and charges 
the purchase to that CDC. The vendor then sends the 
merchandise to the customer. A problem ot this method 
of operation is thai the customer must provide hiaMer 
CDC number to the vendor. This lends to compromise 
the secrecy of the CDC number which makes possible 
the fraudulent used such a number The possibility of 
such fraudulent use helps to keep the rates charged by 
credil card companies to the vendors high, and limits 
teletransaction usage. 

[0QO3] EP-A-0 501 697 discloses a method according 
to the preamble of claim 1 . 

[0004] In me method disclosed in EP-A-0 501 697, a 
customer is connected to a vendor, and the customer 
and the vendor discuss the proposed transaction and 
corns to an agreement on the price. The agreed price, 
and identification of the customer, are passed to a credit 
card data base which decides whether the transaction 
can be authorised. Since the authorisation process is 
carried out on an agreed price, this method is relatively 
inflexible - if the customer should decide to purchase 
additional goods, or higher range goods. It is necessary 
to repeat the authorisation process. 
[0005] The present invention provides a method of 
authorising a purchase of goods or services as claimed 
in claim 1. 

[0006] In accordance with applicants invention, an 
advance is made over the methods of ihe prior art by 
connecting a customer desiring toorder merchandise to 
the data base of a CDC company or to its authorised 
agent such as a common carrier, the caller then pro- 
vides the CDC number to the data base, which after 
checking the authorisation of Ihe CDC number, provides 
an authorisation indication to a vendor. The vendor 
charges the credit card company tor the purchase using 
the authorisation code. Advantageously, the credit card 
number is only provided to the credit card company or 
carrier, not to the vendor. 

[00071 According to the present invention, the author- 
isation indication that is transmitted from the data base 
to the vendor includes a limit of allowed expenditure for 
a transaction. 1 1 is therefore possible for the customer to 
change his order without the need to obtain fresh au- 
thorisation (provided, of course, that the changes do not 
exceed the limit ot allowed expenditure). 
[0008] In accordance with one feature of the inven- 
tion, identification methods are used to identify the caller 



and only provide authorisation tor the purchase (trans- 
action) & the caller is the owner ot the CDC. In one spe- 
cific embodiment oi the invention, the caller is identified 
using voice recognition. Alternatively, or in addition a 

s personal Identification number Is used. Alternatively, or 
in addition, the caller is identified using automatic 
number identification (AN!) which is forwarded to the 
card company or agent as part of the caller identification. 
[D009] In accordance with one feature of the inverv 

jo tion, the authorisation code contains one or more addi- 
tional fields. One such field Is usedto identity the vendor 
and thereby simplify the process of bilfing for the credit 
company. Another field provides the name and/or ad- 
dress of the credit card holder to reduce the effort of the 

is vendor for obtaining this data. Another field specifies a 
limit of the time for which such credit is being allowed. 
Another field specifies the date and lime of the author!- 
2ation. 

20 Brief DescrlF """ erf the Drawing 
(0010] 

FIG. 1 is a block diagram illustrating the operation 
zs of applicant's invention; and ' 

FIG. 2 is a flow diagram of the steps of a method 
for implementing the invention. 

Detailed Description 

so 

[0011] FIG. 1 is a block diagram of the operation of 
applicant's invention. A purchaser at a calling station 1 
Is connected via a telecommunications network 2, such 
as the public switched telephone network, to a credit/ 

as debit card (CDC) data base 5. The calling station pro- 
vides to the data base 5 a CDC number, a personal iden- 
tification number (PIN), and a sample of the caller's 
voice. The sample Is routed to caller verification system 
7 which is used to recognize the voice and to ensure 

40 that tha recognized voice corresponds to the Gpecffled 
crecfit/debit card. The caller is then provided with new 
dial tone and calls the vendor 3. Tha telephone number 
of the vendor is passed from network 2 to CDC data 
base 5 using signaling network 4. The Identity of the ven- 

45 dor is the final piece of data required by the CDC data 
base to provide the authorization code. This authoriza- 
tion code is passed from CDC data base 5 via signaling 
network 4 and network 2 to vendor 3. In one specific 
implementation of applicant's invention, the euthoriza- 

50 tion number is provided over a D-channel of an integrat- 
ed services digital network (ISDN) Bnk to the vendor. Al- 
ternatively, this information may. be provided U3lng other 
signaling techniques such as dual tone multHrequency 
(DTMF) signaling. 

55 [0012] After the vendor has received the authorization 
code, the vendor is connected to the calling station and 
receives verbal instructions from the calling station. 
These verbal instructions, such as for merchandise to 
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be ordered, are associated with the received authoriza- 
tion number end the vendor then transmits via network 
2 and signaling networtc 4, the authorization code plus 
merchandise and charge information to the CDC data 
base 5 to charge the customer appropriately. The s 
charge Is valid only it the aulhorizatlon code and the ven- 
dor identitication correspond and any restrictions such 
as dollar limit and time limit are satisfied. The CDC com- 
pany 6 is connected via the network and optionally via 
a data link to the CDC data base to allow the data base 10 
to be updated, for example, when a credit card is found 
to have been lost. 

[0013] The authorization includes an authorization 
code specif Ing the dollar limit of the amount of credit be- 
ing authorized lor this transaction. 15 
[0014) In accordance with one feature of the inven- 
tion, the authorization code contains one or more addi- 
tional fields. One such field is used to identify the vendor 
and thereby simplffy the process of billing for the credit 
company. Another field provides the name and/or ad- 
dress of the credit card holderto reduce the effort of the 
vendor for obtaining this data. Another field specifies a 
lima of the time for which such credit Is being allowed. 
Another field specifies the date and time of the authori- 
zation. 25 
[001 5] FIG. 2 is a flow diagram of steps performed to 
practice applicant's invention. Initially, block 200, a CDC 
holder (CDCH) wants to make a teletransaction. Block 
201 and Its succeeding blocks Illustrate a method 
wherein the C0CH initially caOs the date base of a card w 
company or its agent. Block 203 illustrates that the card 
company requests the card number, and a PIN or a 
voice sample, and validates the card and its user, this 
request may not be necessary fl the caller's telephone 
station has been identified by an Automatic Number 55 
Identification (AN1) number forwarded to the data base, 
and matching the recorded telephone number for that 
CDC. The data base verifies the authorization of the 
CDC holder to incur the expense and prepares an au- 
thorization code for transmission to the vendor. If the 
CDCH is so authorized, the CDCH Is then given a new 
dial tone and calls the vendor (block 205). Block 207 
indicates that the CDCH ordere the products/eervicos 
from the vendor who has been automatically provided 
with the authorization code. Eventually the CDCH dts- & 
connects (block 209) and the vendor charges against 
the card using the authorization code (block 21 1 ) If the 
transaction has been authorized and the time and dollar 
values are not exceeded. This can be performed either 
by the vendor filling out a credit ticket or by the vendor » 
providing information which is immediately sent back as 
a data message to the CDC data base. 
[0016] An alternate approach Is illustrated In block 
241 and its successors. Here the CDCH calls the vendor 
directly (action block 241). The vendor connects the CO- €S 
CH to the card validator data base and the card valida- 
tion is performed in a transaction between the calling 
station 1 and CDC data base 5. The transfer of calling 



station 1 to CDC data base 5 is performed by setting up 
a connection between the CDCH and the data base in 
such a way that it is impossible for the vendor to eaves- 
drop on this connection. The card is validated by the 
card validator using the card number, the PIN, and/or, if 
appropriate, vote recognition (action block 243). The 
CDCH is then returned to the vendor who is provided 
with an authorization code from the data base (action 
block 245). The CDCH then orders the products and the 
service against the authorization code received by the 
vendor (aclion block 247) and the CDCH ovontuafiy 
hangs up (action block 249). The vendor charges 
against the CDC using the authorization code (action 
block 251). 

[001 7] Note that in both of ffiese scenarbs the cretft/ 
debit card number is not provided to the vendor who only 
receives the authorization code. 
[0018] In another alternative arrangement, when a 
customer has selected his/her merchandise or service, 
the customer is connected to the CDC data base from 
a convenient station, possibly including a card reader, 
located In the vendor's store. After the C DC number has 
been entered and the transaction authorized, the au- 
thorization code is provided audibly or In video or printed 
form for the vendor, at Ihe convenient station or at an 
associated terminal. 

[0019] It is to be understood that the above descrip- 
tion is only of one preferred embodiment of the inven- 
tion. Numerous other arrangements may be devised by 
one skilled in the art without departing from the scope 
of the invention. The invention Is thus limited only as 
defined in the accompanying claims. 



Claims 

1. A method of authorising a purchase of goods ca- 
se rvices, comprising; responsive to receiving in a 
data base for authorising a credit/debit card (CDC) 
expenditure data from a holder (1 ) identifying a spe- 
cific CDC, determining whether their CDC is author- 
ised to incur an expenditure; and 

responsive to a determination that said CDC 
is authorised to incur said expenditure, transmitting 
from said data base (5) an authorisation indication 
to a vendor (3) of said goods or services, the iden- 
tification of said CDC not being derivable from said 
authorisation code whereby the identification of 
said CDC is not provided to said vendor 
the method being characterised In that said author- 
isation indication comprises an authorisation code 
for tracking a purchase transaction, the authorisa- 
tion code comprising a limit of allowed expenditure 
for a transaction. 

2. A method as claimed In claim 1 wherein said au- 
thorisation code further comprises one or more of 
the following: an identification of said vendor, date 
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and/or time data, a time limitation 1or a transaction, 
the name of a holder of said CDC, and an address 
of a holder of said CDC. 

3. A method as claimed in claim 1 , 2 wherein said data 
received in said data base comprises data tor veri- 
fying the identity of the user of said CDC. 

4. A method as claimed In claim 3 wherein said data 
lor verifying comprises a personal identification 
number. 

5. A method as claimed In claim 3 or 4 wherein said 
data for verifying comprises an automatic number 
jdenlification of a ceJIer station supplying said CDC 
identification, 

6. A method as claimed in any preceding claim com- 
prising the steps of: 

establishing a voice connection to voice recog- 
nition means for recognising the identity of a 
caller; and 

using output of said voice recognition means to 
identify a user of said CDC. 



grenzung fur eine Transaktbn, den Namen eines 
Inhabers der CDC und eine Adresee eines Inhabers 
der CDC. 

6 3, Verfahren naoh Anspruch 1 , Z wobei die in der Da- 
tenbank empf angenen Daten Daten zum Verifizie- 
ron der identrtat des Benutzers der CDC umfasaen. 

4. Verfahren nach Anspruch 3, wobel die Daten zum 
w VerH izieren sine personliche Identifikationsnummer 

umtassen. 

5. Verfahren nach Anspruch 3oder 4, wobei die Daten 
zum Verifizieren eine automelische Numrnemiden- 

is tifikation elner Annotation, die die CDC-ldentifika- 
tion liefert, umfassen. 

6. Verfahren nach einem voranstehenden Anspruch, 
umfaesend die Schritte: 

20 

Einrichten einer Sprachverbindung zu einer 
Spracherkcnnungseinrichtung zum Erkennen 
der Identitat eines Anrufere; und 
Verwenden elner Ausgabe der Spracherken- 
e& nungseinrichtung, urn einen Benutzer der CDC 

zu idemifizieren. 



PatenlansprOche 

1, Verfahren zum Authentifizieren eines Kauts von 
Handelsgutem odor Dienstleisiungen, urnfassend: 

in Antwort auf ein Empfangen, in einer Daten- 
bank zum Authentifizieren elner Kredit-ZDebit- 
karte (CDC) -Ausgabe, von Daten von einem In* 
haber (1), die eine epezcfische CDC Identffizis- 
ren, ein Bestimmen. ob Ihre CDC authentif iziert 
ist, eine Ausgabe zu tatigen; und ^ 
in Antwort auf eine Beetimmung. da& die CDC 
authentrfiziert ist, die Ausgabe zu tatigen, ein 
Ubertragen eine6 Authentif izierungsvermerks 
von der Datenbank (S) zu einem Verkaufer (3) 
der HandelsgOteroderDienstteistungen, wobei 
die fdentifizierung der CDC von dem Authentic 
fizierungscode nicht ableitbar ist, wodurch die 
IdBrtifizierung der CDC dem verteufer nicht 
bereitgestellt wird; wobei das Verfahren da- 
durch gekennzeichnet ist, da 8 der Authentif i« 
zierungsvermerk elnen Authenfflizierungscode 
zum Verfolgen einer Kauftransaktbn urrdaBt. 
wobei der Authentif izierungscode eine Begren- 
zung der zugeiassenen Ausgaben fflr eine 
Transaktion umfaGt. 

2. Verlahren nach Anspruch 1, wobei der Authentift- 
ziorungscoda wefter eines Oder rnehreres von dem 
Folgenden umlaGt: eine tdentfflzierung des Verkau- 
fers, ein Datum und/odar Zeitdaten, eine ZeKbe- 
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Revindications 

1. Procede tfautorisation d'un achat de biens ou de 
services, comprenant: 

en reponse a la reception, dans une base de 
donnees pour autoriser une depense par carte 
de credit/debit (CDC), de donnees en prove- 
nance d'un detenteur (1) identifiant une CDC 
specltlque, determination de si oui ou non ea 
CDC est autorisee a supporter une depense; et 

en reponse a une determination du fait quo la- 
dite CDC est autorisee a supporter ladlte de- 
pense, emission depuisladitebasede donnees 
(5) d*une indication d'autonsatbn pour un ven- 
deur (3) desdfts biens ou services, HdentMca- 
tion de ladile CDC ne pouvant pas etre derives 
a partir dudit code d'autorisation de telle sorte 
que Identification de ladite CDC ne soit pas 
foumie audit vendeur, 

Is precede etant caracterisa en ce que ladtte 
indication d'autorisation comprend un code 
d'autorisation pour suivro une transaction 
d'achat, !e code d'autorisation comprenant une 
limite de depense accordee pour une transac- 
tion. 

2. Procede eolon la revendication 1 , dans loquel ladit 
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code d'autcrisalion comprend en out re un ou plu- 
sieurs des elements qui suivent: une identification 
dudit vendeur, des donnees de date et/ou d'heure, 
une limitetion temporelle pour uno transaction, le 
nom d'un detenteur de ladite CDC et une adresse s 
d'un detenteur de ladite CDC. 

3. Precede selon la revendfcatton 1 ou 2, dans lequel 
lesdites donnees recues dans ladite base do don- 
nees comprennent des donnees pour verifier I'iden- 10 
tite de rutHisateur de ladite CDC. 

4. Proced6 selon la revendication 3, dans lequel les- 
dites donnees pour verifier comprennent un nume- 

ro (^identification personnel- 15 

B. Precede selon la revendication 3 ou 4, dans lequel 
lesdites donnees pour verifier comprennent une 
identification par numero automat ique cfune station 
d'appelanl qui applique ladite jdentification de CDC. w 

B. Procdde selon I'une quelconque des revendicat bne 
precedentes, comprenant les etapes de: 

6tablissement d'une connexion vocale sur un 
moyen de reconnaissance vocale pour recon- 
naTtre f identity d'un appelant: et 

utilisation de la sortie dudit moyen de recon- 
naissance vocale pour identifier un utilisateur 30 
de ladite CDC. 



35 



40 



45 



50 



55 



5 



EP 0 590 861 B1 




PUBUC 
SWITCHED 
TELEPONE 
NETWORK 



. f 5 




CREDIT/DEBIT 
CARD (CDC) 
DATA BASE 




CALLER 
VERIFICATION 




CREDIT/DEBIT 
CARD (CDC) 
COMPANY 



6 



EP 0 590 661 B1 



FIG. 2 
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CREDIT/DEBIT CARD HOLDER (CDCH) 
WANTS TO MAKE A TELEPHONE TRANSACTION 
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CDCH CALLS 
CARD COMPANY 
(OR IT'S AGENT) 




CDCH CALLS YENDOR 
OF PRODUCT 
OR SERVICE 




,203 


\ r243 






VENDOR CONNECTS CDCH 

TO CARD VALIDATOR 
AND CARD IS VALIDATED 
BY CARD VALIDATOR 
(CARD COMPANY, elc.) 


CARD COMPANY 
REQUESTS CARD §, PIN 
AND VALIDATES CARD 
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CDCH IS GIVEN 
NEW DIAL TONE 
AND CALLS VENDOR 




CDCH IS RETURNED 
TO VENDOR WITH 
A VALIDATED CARD 
INDICATION 
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CDCH ORDERS 
PRODUCT/SERVICES 
FROM VENDOR USING 
AUTHORIZATION CODE 

(NOT CARD #) 




CDCH ORDERS 
PRODUCT/SERVICES 
FROM YENDOR USING 
AUTHORIZATION CODE 

(NOT CARD §) 
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CDCH HANGS UP 



VENDOR CHARGES 
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CARD USING 
AUTHORIZATION CODE 
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CDCH HANGS UP 
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CARD USING 
AUTHORIZATION CODE 
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